Hacker News new | ask | show | jobs
by Rabidgremlin 13 days ago
For some very basic level protection use devcontainers and install the agent into that....

A better approach is to use the Docker Sandboxes feature. Locks things way down so that the agent only has access to the files you give it and you can lock down its network access too. Also does things like keep any credentials outside of the container (microvm actually).

1 comments

thank you. this article freaked me out a bit because I hadn't realized the docker loop hole.